Privacy & operator details
Operator and data controller
Devil’s Bar · Rompho Market
Thitirat Kamsawaeng
75/268 Moo 12, Nong Prue
Bang Lamung, Chon Buri 20150, Thailand
Email:
Operator of the bar and data controller for the processing described here. She can be contacted at the business address and email above.
Contact and booking enquiries
We process your name, email address, enquiry topic and message to respond to your enquiry. Your preferred date and guest count are optional. The form cannot be submitted without the required information. No customer account is needed. Enquiries are emailed to and read by the operator or people assigned to handle them. An enquiry is not a confirmed booking. Please do not send identity documents or sensitive information.
Purposes and legal basis
We handle booking enquiries as steps towards a possible agreement under section 24(3) of Thailand’s Personal Data Protection Act (PDPA). General enquiries, secure operation and abuse prevention rely on legitimate interests under section 24(5), subject to overriding individual rights. Where another processing activity requires consent, you may withdraw it for future processing. The operator is the contact for handling enquiries.
Hosting, email and technical logs
The website is hosted on a server in Austria. Hosting and email delivery are provided through Cyberhosting e.U., Austria (cyberhosting.at). Website requests may involve IP address, time, requested URL, browser information and errors in technical server and security logs. The form does not maintain a separate enquiry database; correspondence is handled in the email system. Providers receive data as needed for operation, delivery, maintenance or security. This also involves processing outside Thailand.
Cloudflare Turnstile
The contact form uses Cloudflare Turnstile, provided by Cloudflare, Inc., USA, to distinguish human visitors from automated requests. The service loads when you visit the page containing the form. Cloudflare processes technical signals such as IP address, browser information and connection information, including when you do not submit the form. Cloudflare also processes these signals to improve bot detection. Processing outside Thailand, including in the USA, is possible. Our form integration does not submit your name, email address or message text as Turnstile verification data. Alternatively, contact directly. Further information: Cloudflare Turnstile privacy notice and Cloudflare privacy policy.
Retention
Completed enquiries that do not result in a booking are deleted no later than three months after handling is completed, unless legal retention duties or outstanding legal claims require otherwise. Booking records are retained according to fulfilment and applicable retention duties. This rule concerns enquiry correspondence in the email mailbox; the form maintains no separate enquiry archive. Technical logs support security and troubleshooting; backups support recovery. For information about retention of your data, contact .
Cookies, videos and external links
No analytics or advertising pixels are configured for the public website. WordPress uses necessary cookies for sign-in and administration. Security services may perform technical checks. YouTube videos load only after you confirm loading in the video dialog, which transfers connection data to YouTube/Google. Songs are provided as local audio files. Facebook, TikTok, YouTube and Google Maps are also linked externally; their own privacy notices apply when you open those services.
Your rights and contact
Subject to Thailand’s PDPA, you may request access and a copy, correction, erasure, restriction, objection and portability. You may withdraw consent for future processing without affecting the lawfulness of earlier processing. You may complain to Thailand’s Personal Data Protection Committee (PDPC). For privacy requests and questions about photos or videos, contact . Please describe your request; appropriate identity verification may be necessary to prevent unauthorised disclosure. Updated: 2 November 2026.